CVE-2023-0811 Missing authorization in CJ1M SYSMAC CJ-series
Attackers can overwrite the user memory password via improper access controls, disabling protections or locking out engineers from modifying the user program.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-0811?
CVE-2023-0811 is a critical missing authorization vulnerability in Omron CJ1M SYSMAC CJ-series, published on 16 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Omron CJ1M unit v4.0 and prior has improper access controls on the memory region where the UM password is stored. If an adversary issues a PROGRAM AREA WRITE command to a specific memory region, they could overwrite the password. This may lead to disabling UM protections or setting a non-ASCII password (non-keyboard characters) and preventing an engineer from viewing or modifying the user program.
Weakness: CWE-284
Which versions are affected by CVE-2023-0811?
It affects 128 products.
Products include Omron Sysmac Cj2h-Cpu64-Eip Firmware, Omron Sysmac Cj2h-Cpu64 Firmware, Omron Sysmac Cj2h-Cpu65-Eip Firmware, Omron Sysmac Cj2h-Cpu65 Firmware, Omron Sysmac Cj2h-Cpu66-Eip Firmware, Omron Sysmac Cj2h-Cpu66 Firmware and 122 more.
How do I fix CVE-2023-0811?
No fix has been published for CVE-2023-0811 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2023-0811 being exploited?
There is no known exploitation of CVE-2023-0811 in the wild and no public exploit code.
Sources
Also known as GHSA-xmm9-hrfr-pphf.